This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft File: 8AoiTeba0aHtExtflbgyMaKryvE.mft (raw, json) Hash identifier: rRC4JpMIv/gEH5qSAyjDb/TnxNqTi6TOsBd37vzDykg= Subject key identifier: 4D:01:B9:3D:A8:01:3D:A4:60:53:48:29:CB:5C:A5:B8:18:A0:95:29 Authority key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1 Certificate issuer: /CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1 Certificate serial: 019B1FBD27CC74102E5156E8FA6FE6D3D95F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft Manifest number: 0483 Signing time: Mon 15 Dec 2025 02:00:48 +0000 Manifest this update: Mon 15 Dec 2025 02:00:48 +0000 Manifest next update: Tue 16 Dec 2025 02:00:48 +0000 Files and hashes: 1: 8AoiTeba0aHtExtflbgyMaKryvE.crl (hash: vcW5lKYbxLoWZFEXN3T9BNOGkdv3nSvo8AtYzDohBGU=) 2: GWuRNScxtrzO8_nSAwKtJ8krFKo.roa (hash: BtQh9X2ueT8vHmbHjBYpzs9GSTTXkl7BLVZXjmS8mp0=) 3: TBV8XL8EuJ9o9oGzIzm8EoRgBys.roa (hash: 0Cql4kgvd07ySH8Z69IoKjqLLTAd4hRTfVwaM91rMF0=) 4: qHH2o0DyGGvFZsG0UvDbftuaafE.roa (hash: kKq7Omvw8T994nGi5bKJ+ng+xxGY7/jkfWqujpmbzDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 02:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:bd:27:cc:74:10:2e:51:56:e8:fa:6f:e6:d3:d9:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1 Validity Not Before: Dec 15 02:00:48 2025 GMT Not After : Dec 16 02:00:48 2025 GMT Subject: CN=4d01b93da8013da460534829cb5ca5b818a09529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d7:88:52:c9:b9:af:70:73:79:34:e8:01:29: 00:a9:18:b8:93:c9:b3:b9:52:0e:03:62:19:c2:38: 33:ed:cb:2e:5d:a9:be:ab:4a:4f:df:5a:0d:4c:35: ee:9a:44:3b:e9:5b:0f:db:8a:f8:65:c0:7f:b5:20: b4:5b:64:51:0a:75:07:db:4d:a5:28:b1:42:6d:a1: 15:54:b0:66:c5:fb:87:2c:f8:e6:8e:db:67:38:5f: 0f:87:64:76:65:47:6c:01:8d:ba:47:a5:b0:75:62: 3f:31:2f:c2:6f:29:9f:9c:55:2d:03:51:28:fb:2d: 39:2e:87:72:c0:00:55:82:89:c1:2b:4d:e6:03:78: c5:06:13:9c:70:b7:71:e7:30:94:0f:1e:01:5b:df: 1d:51:20:06:08:61:25:34:47:bd:40:7f:2f:d2:f1: d2:67:58:6a:26:f3:b2:2c:28:67:20:c2:c1:4b:3c: 60:45:7c:61:63:06:5d:71:a1:82:49:f4:03:4c:3c: 19:bb:a7:57:89:00:e6:99:d7:b8:4a:8a:71:c5:83: 25:f0:d9:95:86:7e:8d:b3:77:7c:ac:5c:7b:f0:7c: c0:38:d7:25:df:03:3c:76:cd:6f:f6:5f:57:66:a1: 02:91:32:a4:d1:88:d8:dd:12:36:88:84:dc:ae:94: e9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:01:B9:3D:A8:01:3D:A4:60:53:48:29:CB:5C:A5:B8:18:A0:95:29 X509v3 Authority Key Identifier: keyid:F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:a0:2a:f9:34:cf:66:4a:c4:09:2d:d1:87:75:f7:ec:b8:ba: ee:cb:1c:36:91:26:24:f9:f3:54:ce:2a:22:39:85:10:64:55: 7a:eb:53:20:19:ee:d8:8f:ef:3a:34:f5:f1:95:1a:4e:de:66: d0:6b:47:bb:d5:a9:13:29:b0:a4:bb:cf:39:d0:dd:97:0c:f6: ef:fc:04:d9:33:67:df:d6:0d:7c:cc:c0:b4:c9:02:48:98:85: e5:3f:f8:7e:06:42:9a:b1:39:d2:05:99:4a:4f:52:48:d6:1c: 35:ea:45:fe:9a:6b:38:ce:6c:ee:9c:05:49:82:35:66:00:1a: c6:bd:be:5b:38:00:ee:50:0a:e1:42:8e:98:dc:c2:43:7d:9d: 10:09:33:fe:3c:73:06:cc:4c:a4:cf:70:d2:3a:02:40:80:1e: ad:9d:01:02:af:14:7a:81:04:38:3f:e4:4d:8b:2c:77:92:07: a8:13:10:47:1e:6e:65:c6:2f:2e:a7:42:e3:c1:97:be:78:cb: bf:63:93:4d:e3:6d:a8:d7:02:e4:3c:b0:a7:a0:1d:ff:b6:e2: 7e:22:30:e9:cf:86:07:3b:4a:13:27:58:3e:52:9e:a8:bd:cc: a2:e0:f8:6d:4f:f1:22:ac:25:04:e6:59:cf:16:59:30:f1:3d: 4f:98:d1:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfvSfMdBAuUVbo+m/m09lfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMGEyMjRkZTZkYWQxYTFlZDEzMWI1Zjk1YjgzMjMxYTJh YmNhZjEwHhcNMjUxMjE1MDIwMDQ4WhcNMjUxMjE2MDIwMDQ4WjAzMTEwLwYDVQQD Eyg0ZDAxYjkzZGE4MDEzZGE0NjA1MzQ4MjljYjVjYTViODE4YTA5NTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNeIUsm5r3BzeTToASkAqRi4k8mz uVIOA2IZwjgz7csuXam+q0pP31oNTDXumkQ76VsP24r4ZcB/tSC0W2RRCnUH202l KLFCbaEVVLBmxfuHLPjmjttnOF8Ph2R2ZUdsAY26R6WwdWI/MS/CbymfnFUtA1Eo +y05LodywABVgonBK03mA3jFBhOccLdx5zCUDx4BW98dUSAGCGElNEe9QH8v0vHS Z1hqJvOyLChnIMLBSzxgRXxhYwZdcaGCSfQDTDwZu6dXiQDmmde4SopxxYMl8NmV hn6Ns3d8rFx78HzAONcl3wM8ds1v9l9XZqECkTKk0YjY3RI2iITcrpTpMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0BuT2oAT2kYFNIKctcpbgYoJUpMB8GA1UdIwQY MBaAFPAKIk3m2tGh7RMbX5W4MjGiq8rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEFvaVRlYmEwYUh0RXh0ZmxiZ3lNYUtyeXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83NWU2NTktMDkyZi00ZWU0LTg3MTgt NzUxOWUxMDVhZWRhLzEvOEFvaVRlYmEwYUh0RXh0ZmxiZ3lNYUtyeXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83NWU2NTktMDkyZi00ZWU0LTg3MTgtNzUxOWUxMDVhZWRh LzEvOEFvaVRlYmEwYUh0RXh0ZmxiZ3lNYUtyeXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiaAq+TTP ZkrECS3Rh3X37Li67sscNpEmJPnzVM4qIjmFEGRVeutTIBnu2I/vOjT18ZUaTt5m 0GtHu9WpEymwpLvPOdDdlwz27/wE2TNn39YNfMzAtMkCSJiF5T/4fgZCmrE50gWZ Sk9SSNYcNepF/pprOM5s7pwFSYI1ZgAaxr2+WzgA7lAK4UKOmNzCQ32dEAkz/jxz BsxMpM9w0joCQIAerZ0BAq8UeoEEOD/kTYssd5IHqBMQRx5uZcYvLqdC48GXvnjL v2OTTeNtqNcC5Dywp6Ad/7bifiIw6c+GBztKEydYPlKeqL3MouD4bU/xIqwlBOZZ zxZZMPE9T5jRNg== -----END CERTIFICATE-----Generated at Mon Dec 15 12:05:23 2025 by rpki-client